This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/3tuFHZnDepF1l6oq2bvrb1rMMD8.roa File: 3tuFHZnDepF1l6oq2bvrb1rMMD8.roa (raw, json) Hash identifier: +k4uZmLiFoSus5bY1Ke7OOBXPpa192MGFVvaT0zQNdU= Subject key identifier: DE:DB:85:1D:99:C3:7A:91:75:97:AA:2A:D9:BB:EB:6F:5A:CC:30:3F Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83A955B9EC0910C0D5BBD25C544774 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/3tuFHZnDepF1l6oq2bvrb1rMMD8.roa Signing time: Fri 02 Jan 2026 16:21:33 +0000 ROA not before: Fri 02 Jan 2026 16:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197998 IP address blocks: 37.230.223.0/24 maxlen: 24 141.101.140.0/23 maxlen: 23 141.101.207.0/24 maxlen: 24 141.101.212.0/23 maxlen: 23 141.101.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:a9:55:b9:ec:09:10:c0:d5:bb:d2:5c:54:47:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dedb851d99c37a917597aa2ad9bbeb6f5acc303f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:64:75:da:cb:b3:c2:e8:01:9d:19:54:47:45: 08:13:55:02:c3:82:54:1f:c7:b2:7f:87:f6:b3:30: 90:60:30:9c:31:c9:76:9a:ac:35:6b:27:5f:80:e2: f8:ad:56:d5:16:be:af:3d:b5:3a:c6:2f:aa:d1:dc: 88:10:f2:ea:a1:fb:c2:a9:1c:41:43:f9:7b:b3:dd: 06:67:cb:b3:1e:e4:c7:db:54:31:34:d9:ae:f4:e0: df:68:bf:92:f3:6f:5b:7a:ec:e7:bf:3a:53:d6:15: 6d:b7:17:37:88:18:b8:9a:78:3a:11:5f:e9:d6:fe: d5:ad:f4:97:96:0c:24:88:82:ae:99:d3:1a:48:56: 5f:cb:14:ee:ac:60:e7:e1:59:28:17:16:2b:7d:e7: 2b:5a:d3:39:af:2c:2c:40:68:0f:fe:6c:8f:d5:0c: bc:a3:0c:80:1f:74:25:76:52:fc:39:98:ea:40:b6: 00:e6:0e:be:7a:a5:c8:10:d9:5a:70:20:60:3b:4a: 15:87:0a:74:77:36:64:7b:e6:a4:75:b1:cb:f8:d0: b2:5e:31:1c:ae:12:cf:01:94:b1:82:4a:71:d0:dc: d9:4a:13:6b:bf:62:49:7f:30:69:18:43:06:59:0e: 24:a4:38:02:f5:80:e3:7e:d2:a4:48:fc:4f:c3:16: 63:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DB:85:1D:99:C3:7A:91:75:97:AA:2A:D9:BB:EB:6F:5A:CC:30:3F X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/3tuFHZnDepF1l6oq2bvrb1rMMD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.223.0/24 141.101.140.0/23 141.101.207.0/24 141.101.212.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:7c:a0:77:fc:d8:e9:52:b3:41:87:14:4c:15:42:0c:1c:2e: 25:e3:5f:d7:10:38:a4:d0:04:75:81:c9:e3:f1:69:05:50:1c: 7d:b0:11:77:6f:95:f9:5c:02:00:ee:22:f8:31:aa:07:35:0b: e7:4b:b6:7c:e0:a5:f2:06:91:e3:30:fa:89:0d:48:43:92:98: 0d:35:76:fe:37:8c:a4:44:b6:a0:2c:c7:6f:f7:a6:4f:ca:b9: 70:12:ad:32:bb:58:06:49:61:cd:74:d7:18:41:02:c5:56:25: de:a5:2c:b5:a9:db:b3:9a:91:69:05:1d:e3:d3:82:73:9b:49: d4:77:e6:06:73:64:4e:11:9e:47:50:5d:c3:94:e0:fa:4f:9c: 0c:82:5d:3a:55:43:c8:60:27:d7:b8:61:50:24:3a:e3:85:1c: 3e:45:79:f3:1b:72:c8:04:1d:af:9d:51:59:04:8f:ed:39:19: 7d:a3:78:f5:14:7c:22:20:fb:2c:de:5b:a9:10:8c:74:49:de: ea:21:82:de:8a:c1:cf:2f:31:89:ea:b5:8b:b7:a0:1f:ec:79: 69:ab:15:cb:97:9a:15:fc:9f:a5:d7:50:77:c0:b0:20:90:4b: 7e:77:f4:81:05:21:d9:5d:84:dd:7f:64:df:0c:80:5b:d7:c1: 27:ab:fd:aa -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/g6lVuewJEMDVu9JcVEd0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWRiODUxZDk5YzM3YTkxNzU5N2FhMmFkOWJiZWI2ZjVhY2MzMDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymR12suzwugBnRlUR0UIE1UCw4JU H8eyf4f2szCQYDCcMcl2mqw1aydfgOL4rVbVFr6vPbU6xi+q0dyIEPLqofvCqRxB Q/l7s90GZ8uzHuTH21QxNNmu9ODfaL+S829beuznvzpT1hVttxc3iBi4mng6EV/p 1v7VrfSXlgwkiIKumdMaSFZfyxTurGDn4VkoFxYrfecrWtM5rywsQGgP/myP1Qy8 owyAH3QldlL8OZjqQLYA5g6+eqXIENlacCBgO0oVhwp0dzZke+akdbHL+NCyXjEc rhLPAZSxgkpx0NzZShNrv2JJfzBpGEMGWQ4kpDgC9YDjftKkSPxPwxZjEQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFN7bhR2Zw3qRdZeqKtm7629azDA/MB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvM3R1RkhabkRlcEYxbDZvcTJidnJiMXJNTUQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJebfAwQB jWWMAwQAjWXPAwQCjWXUMA0GCSqGSIb3DQEBCwUAA4IBAQBKfKB3/NjpUrNBhxRM FUIMHC4l41/XEDik0AR1gcnj8WkFUBx9sBF3b5X5XAIA7iL4MaoHNQvnS7Z84KXy BpHjMPqJDUhDkpgNNXb+N4ykRLagLMdv96ZPyrlwEq0yu1gGSWHNdNcYQQLFViXe pSy1qduzmpFpBR3j04Jzm0nUd+YGc2ROEZ5HUF3DlOD6T5wMgl06VUPIYCfXuGFQ JDrjhRw+RXnzG3LIBB2vnVFZBI/tORl9o3j1FHwiIPss3lupEIx0Sd7qIYLeisHP LzGJ6rWLt6Af7HlpqxXLl5oV/J+l11B3wLAgkEt+d/SBBSHZXYTdf2TfDIBb18En q/2q -----END CERTIFICATE-----Generated at Tue Jan 20 12:11:09 2026 by rpki-client